It looks to me that there are now two keys in the file. Package is signed with the first (older but still valid) key. Not sure if rpm should work with such combined files or copr shouldn't create them at first place. Anyway, it looks, it can't be properly imported to rpmdb.

$ curl https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg | gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1847  100  1847    0     0  17101      0 --:--:-- --:--:-- --:--:-- 17101
pub   rsa2048 2016-12-06 [SCEA] [expires: 2021-12-05]
      7F054CC665012A24B0DDB892A0336E0A3802E829
uid           tkopecek_koji (None) <tkopecek#koji@copr.fedorahosted.org>
pub   rsa2048 2016-12-08 [SCEA] [expires: 2021-12-07]
      7FBEDD554C88D63CBAD0EB8F5F028C6B8F2BCCA6
uid           tkopecek_koji (None) <tkopecek#koji@copr.fedorahosted.org>

$ rpm --verbose -K  koji-1.21.0-20200421.1.el7.noarch.rpm
koji-1.21.0-20200421.1.el7.noarch.rpm:
    Header V3 RSA/SHA1 Signature, key ID 3802e829: OK
    Header SHA1 digest: OK
    V3 RSA/SHA1 Signature, key ID 3802e829: OK
    MD5 digest: OK

st 22. 4. 2020 v 0:48 odesílatel Dennis Gilmore <dennis@ausil.us> napsal:
That's an issue in COPR, they must be pointing at the wrong gpg key

Dennis

On Tue, Apr 21, 2020, 16:03 Ken Dreyer <ktdreyer@ktdreyer.com> wrote:
I was trying to use the master branch packages here for el7:
https://copr.fedorainfracloud.org/coprs/tkopecek/koji/

There seems to be some kind of GPG problem though, and I can't tell if
it's a koji package issue or a Copr infrastructure issue.

Here is a really simple way to reproduce it:

# Start with a CentOS 7 environment:
podman run -it --rm centos:7

# Enable EPEL:
yum -y install epel-release

# Enable the Copr:
curl https://copr.fedorainfracloud.org/coprs/tkopecek/koji/repo/epel-7/tkopecek-koji-epel-7.repo
> /etc/yum.repos.d/tkopecek-koji-epel-7.repo

# Install any koji package from the Copr:
yum install koji-builder
[ ... long output snipped ... ]
Retrieving key from
https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
Importing GPG key 0x3802E829:
 Userid     : "tkopecek_koji (None) <tkopecek#koji@copr.fedorahosted.org>"
 Fingerprint: 7f05 4cc6 6501 2a24 b0dd b892 a033 6e0a 3802 e829
 From       : https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
Is this ok [y/N]: y

Public key for python2-koji-1.21.0-20200421.1.el7.noarch.rpm is not installed

 Failing package is: python2-koji-1.21.0-20200421.1.el7.noarch
 GPG Keys are configured as:
https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg


When I set "gpgcheck=0" in tkopecek-koji-epel-7.repo, I can install Koji fine.

Where should I look next?

- Ken
_______________________________________________
koji-devel mailing list -- koji-devel@lists.fedorahosted.org
To unsubscribe send an email to koji-devel-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/koji-devel@lists.fedorahosted.org
_______________________________________________
koji-devel mailing list -- koji-devel@lists.fedorahosted.org
To unsubscribe send an email to koji-devel-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/koji-devel@lists.fedorahosted.org


--

            Tomas Kopecek <tkopecek@redhat.com>
            RHEL Build Development, RedHat